Link to home
Start Free TrialLog in
Avatar of Wayne Barron
Wayne BarronFlag for United States of America

asked on

Cannot access website from outside of network

Hello All;

I have 2 domain website that run from inside of my network.
One is accessible outside of the network (In the World Wide internet), the other is NOT.

The one that is not is www.wcff.net

I have checked the DNS and everthing looks and appears to be OK.
I have run several test,
http://www.intodns.com/
Reports that the (ERROR: I could not get any A records for www.wcff.net!)

https://www.dnssniffer.com/tools/dnscheck
Reports that it can access to A WWW record for the domain.

I have ran a tracert on it, through this site here
http://www.monitis.com/traceroute/

The first time that I ran the test, it ran for about 5 minutes, and did not show no results.
I tested my other domain, and it picked it up in about 104ms

Now, I can run the page with www.wcff.net, and it will load US in 84ms

I can access my site by use of a proxy, through here.
http://mirrorrr.appspot.com/www.wcff.net

However, if I try this site
http://nibbler.silktide.com/en_US/reports/www.wcff.net
It reports that it is not accessible.

I am really confused, as the Proxy site, picks up on my site, but nothing else does.

Can someone please assist and shine some light on this issue?
I would really like to get this resolved, as that when I start developing the site, I can also test it via mobile devices outside of the network.

Thank You
Carrzkiss
SOLUTION
Avatar of giltjr
giltjr
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
That's because you need to add a record in you DNS "external" zone which respond to the requests from Internet

Check the DNS external zone for the other site, which is working, for an IP public address. The same A record with that public address must be configured in the wcff.net external zone

Best regards
Avatar of Wayne Barron

ASKER

@giltjr
Absolutely. Thank you, supposedly, you are the first person to view it outside of the network.

@matrix8086
All the records are nearly identical, except for one, that was missing in the wcff that the other domain had, and that was a PTR record. I have since created that one, (Information follows)

After reading both of your post, I decided to delete the zone and recreate it again.

I had to remember a few things that I had done before, that I had forgotten about.
Which was to create the PTR Record, so that is now in the zone.

I will give it until tomorrow, and will give everything a try and see what happens.
Thanks for your time all. Will post back my findings later on in the weekend.
I can still get to it.
Thank you giltjr
giltjr
Are you going to the actual URL (OR) are you using the Proxy link above?
www.wcff.net
(or)
http://mirrorrr.appspot.com/www.wcff.net
I'm have been using just plain http://www.wcff.net.  That host name resolves to the IP address 216.97.166.158.

When you are having problems are you trying to access it from behind your firewall?  Is the host also behind the same firewall? If so, does www.wcff.net inside your firewall resolve to the public IP address or you private internal address.
OK. I finally got the wcff.net to show up on
Google Mobile-Friendly Test
&
I just went onto the Google Webmasters Tool.
And Verified the site through there, so that is AWESOME!

Now, I have 2 Static IP Addresses from my ISP.
One is the Router IP that is assigned to the Router.
One if the IP Address assigned to use for domains.
I add in a PTR for the Router IP, and that enabled the site to be seen through Google Mobile-Friendly and webmaster tools.



I am thinking that I HAD to have the Router IP Address as a PTR in order for the site to be seen.
I am still not seeing it through sites such as:
http://www.monitis.com/traceroute/
&
http://nibbler.silktide.com/en_US/report/submit

So I am going to stay on top of this, and make sure that everything goes good within the next day or so.
Since I created the other PTR record.

Any any suggestions on what else that I can try I would really appreciate it.

Oh, and yes, I know that I cannot access the site through the network, I have to use anything connection or user a Proxy to test these sites that I am building for running within my network, and hosting within my network, and not using an outside provider.
I have never had to put a PTR record for a router.  There are only a few cases where a PTR record may be required and the only one I can think of is that some SMTP servers will do a reverse look-up to make sure that the domain name used in the HELO/EHLO command matches the domain name on the RCPT command.  

Google Webmaster tools does not require a PTR record.  I use Google Webmaster tools for a few sites that I know do not have PTR records for at least one of the sites.
I just checked one of my sites that does NOT have  PTR record to it and Google Mobile-Friendly Test worked without any issues.  I also check out the same site using the two other links you posted and both worked without any problems.

I'm not sure what you original problem was, as I was always able to access your site even when you said you could not.
I know, I am as confused as you are.
I have to put the PTR record in my DNS in order for Google webmaster and Mobile-Friendly to see the site.
As before I did that, they would not see the site.

I just did a TraceRt test http://www.monitis.com/traceroute/
And it picked up on the site
US                =  84ms
Aisa/Pacific = 215ms
Europe         = No results at this time.

I have 10 different sites that are hooked into Google Webmaster, and neither of them, as for as I know, have a PTR on them. Then again, them sites are located on my Hosting Provider. I control the DNS through their DNS tools, at least the most part of it, and there are certain records that are automatic, that I do not have control over.

I still very confused as to what is going on here.
Update.
I just removed the External DNS from my Domain Controller Server
To my Backup Server DNS.
All my DNS records look good, and everything does a LOT better with it being OUT of the Domain Controller DNS.
I am going to give this a few days and see how it is working, and I will come in and post back and let you all know the outcome.

I hope this takes care of it, as i really need to start working on this site, within the next 2 weeks.

Just checked the site that was not showing up, and it is finally showing up!!!
http://nibbler.silktide.com/en_US/reports/www.wcff.net

About blasted time!!!
So, changing over the DNS Server to a NON-DC DNS, for the External DNS, did the trick

I am happy right now.
When did you change the DNS server from a DC to non-DC.  Before or after I was able to view it on (May 1st).
The DNS for the external sites was sitting on the DC up until 4:30 AM EST
Once I changed it over to the Media Server's DNS, and pointed the port to that IP Address.
Everything came ALIVE.
All sites were able to view the DNS, and all issues that I was encountering, like the:
https://www.dnssniffer.com/tools/dnscheck
Reports that it can access to A WWW record for the domain.
IT now can access it without an issue.

So, what it was all along, was that the DC DNS was the cause of the issue the entire time.
Everything seems to be rockin and rolling, the way it supposed to be.
"... DC up until 4:30 AM EST " what day?  Today?

I think there was more going on that just DNS.  Otherwise I would never had been able to see the site 2 days ago.
that was the only thing that i changed, was going from the DC DNS to the other Server DNS.
And then it all started working.
So, that is all that was done, for it to start working like it supposed to work.

It seems that you was one of the only people that could see the page up until now.
Now, other are seeing the page.
>>"... DC up until 4:30 AM EST " what day?  Today?
Yes, early this morning
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I resolved the issue on my own, However, I did not want to close this one out, with just accepting myself as Answer, without giving something to giltjr for him staying in here and attempting to assist me. Even though none of his information really helped.
It is just the right thing to do.

Carrzkiss